Lead Cyber Security Engineer

ZipRecruiter; Greater London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading law firm in Greater London is seeking a Lead Cyber Security Engineer to shape a new Security Operations function. The role involves technical leadership, developing security strategies, and mentoring. Candidates should have experience with CrowdStrike EDR, incident response, and relevant security certifications. This position offers visibility and the chance to lead major initiatives in a dynamic environment.

Qualifications

• Strong background in cyber security engineering.
• Experience leading incident response efforts.
• Knowledge of compliance frameworks such as ISO 27001.

Responsibilities

• Own and configure CrowdStrike EDR.
• Lead incident response and root cause analysis.
• Manage and optimize security tools and technologies.

Skills

CrowdStrike EDR

Incident response

Security frameworks compliance

Networking knowledge

Mentoring junior colleagues

Education

Relevant certifications (CPSA, CISSP)

Tools

Palo Alto firewalls

Intune

Mimecast

Job description

Overview

Lead Cyber Security Engineer — I’m working with a leading law firm that’s building out a brand-new Security Operations (SecOps) function and they’re looking for a Lead Cyber Security Engineer to help shape it from the ground up.

This is a fantastic opportunity for someone who enjoys being both hands-on and strategic. You’ll not only be the technical lead on key projects, but also play a big part in developing security strategy, mentoring junior colleagues, and driving the firm’s journey towards a zero-trust model and ISO 27001 certification.

Why this role?

• Chance to build and shape a new function in a well-established law firm.
• High visibility role working closely with senior stakeholders.
• Opportunity to lead major security initiatives and strengthen overall cyber resilience.
• Exposure to a wide range of security tools and technologies, from CrowdStrike and Palo Alto firewalls to email/web gateways and NAC solutions.
• Career growth - mentor others, lead projects, and become a go-to technical expert.

What you’ll be doing

• Taking ownership of CrowdStrike EDR, including policy configuration and SIEM tuning.
• Working with network teams on segmentation, NAC, and firewall controls.
• Leading on incident response, root cause analysis, and runbook development.
• Managing and optimising a wide suite of tools: WAF, DDoS, VPN, perimeter firewalls, email/web security, MFA, SSO, PAM, MDM/MAM, and conditional access.
• Partnering with InfoSec to align platforms with overall security strategy.
• Supporting vulnerability scanning, remediation, and risk mitigation efforts.
• Collaborating with external penetration testers and ensuring compliance with frameworks such as ISO 27001, NIST, and CIS.
• Staying up to date with the latest threats and ensuring best practice is followed across the firm.

What they’re looking for

• Strong background in cyber security engineering, ideally with experience in:
• CrowdStrike EDR, Mimecast, Tessian (or similar DLP)
• Intune, Entra ID, Active Directory
• Palo Alto firewalls, WAF, Menlo Security
• Security frameworks and compliance (PCI-DSS, ISO 27001, NIST, CIS)
• Networking knowledge and experience leading incident response.
• Relevant certifications such as CPSA, CISSP, or Palo Alto Network Certified Security Ops Professional.